Expert solutions for securing network infrastructures and VPNs Building security into the network by defining zones, implementing secure routing protocol design, and building safe LAN switching environmentsUnderstand work part of the Cisco PIX Firewall and analyze in-depth Cisco PIX Firewall and Cisco IOS Firewall features and VPN conceptsUnderstand what and how they are implemented with protocols such as GRE , L2TP, and IPSecGain understanding of packet-level IPSec protocol suite, encryption-related and hashing functions, and authentication techniquesLearn how network attacks can be categorized and how the Cisco IDS is designed and can be set upto protect against themControl access network by learning how AAA fits into the security model Cisco and by implementing RADIUS and TACACS + protocolsProvision security service providers using ACLs, NBAR, and CAR to identify and control attacksIdentify and resolve common implementation failures by evaluating real-world troubleshooting scenarios As organizations increase their dependence on networks for core business processes and improve access to remote sites and mobile workers via virtual private network (VPN), network security becomes more and more critical. Written by a CCIE engineer who wrote the CCIE Security lab exam and who helped develop the CCIE Security written exam, Network Security Principles and Practices is the first book to help candidates prepare for the CCIE Security exam. Network Security Principles and Practice is a comprehensive guide to network security threats and the policies and tools developed specifically to combat the threat. Taking the approach, practically applied to building security into the network, this book shows you how to build secure network architectures from the ground up. This book takes a look behind the scenes at how the Cisco PIX (r) Firewall actually works, presenting many difficult-to-understand and new Cisco PIX Firewall and Cisco IOS (r) Firewall concepts. This book is sliding into a discussion of intrusion detection systems (IDS) by analyzing and breaking the modern network attacks, describing how to deal with the threat of IDS in general, and describes the Cisco implementation of IDS. Finally, the book concludes with a section dedicated to discussing problem solving tools and tried-and-tested techniques that are not only valuable to candidates working toward their CCIE Security lab exam but also to the network security administrator to run network operations on a daily basis.